cregit-Linux how code gets into the kernel

Release 4.12 include/linux/netfilter.h

Directory: include/linux
#ifndef __LINUX_NETFILTER_H

#define __LINUX_NETFILTER_H

#include <linux/init.h>
#include <linux/skbuff.h>
#include <linux/net.h>
#include <linux/if.h>
#include <linux/in.h>
#include <linux/in6.h>
#include <linux/wait.h>
#include <linux/list.h>
#include <linux/static_key.h>
#include <linux/netfilter_defs.h>
#include <linux/netdevice.h>
#include <net/net_namespace.h>

#ifdef CONFIG_NETFILTER

static inline int NF_DROP_GETERR(int verdict) { return -(verdict >> NF_VERDICT_QBITS); }

Contributors

PersonTokensPropCommitsCommitProp
Florian Westphal18100.00%1100.00%
Total18100.00%1100.00%


static inline int nf_inet_addr_cmp(const union nf_inet_addr *a1, const union nf_inet_addr *a2) { return a1->all[0] == a2->all[0] && a1->all[1] == a2->all[1] && a1->all[2] == a2->all[2] && a1->all[3] == a2->all[3]; }

Contributors

PersonTokensPropCommitsCommitProp
Patrick McHardy76100.00%1100.00%
Total76100.00%1100.00%


static inline void nf_inet_addr_mask(const union nf_inet_addr *a1, union nf_inet_addr *result, const union nf_inet_addr *mask) { result->all[0] = a1->all[0] & mask->all[0]; result->all[1] = a1->all[1] & mask->all[1]; result->all[2] = a1->all[2] & mask->all[2]; result->all[3] = a1->all[3] & mask->all[3]; }

Contributors

PersonTokensPropCommitsCommitProp
Denys Fedoryshchenko108100.00%1100.00%
Total108100.00%1100.00%

int netfilter_init(void); struct sk_buff; struct nf_hook_ops; struct sock; struct nf_hook_state { unsigned int hook; u_int8_t pf; struct net_device *in; struct net_device *out; struct sock *sk; struct net *net; int (*okfn)(struct net *, struct sock *, struct sk_buff *); }; typedef unsigned int nf_hookfn(void *priv, struct sk_buff *skb, const struct nf_hook_state *state); struct nf_hook_ops { struct list_head list; /* User fills in from here down. */ nf_hookfn *hook; struct net_device *dev; void *priv; u_int8_t pf; unsigned int hooknum; /* Hooks are ordered in ascending priority. */ int priority; }; struct nf_hook_entry { struct nf_hook_entry __rcu *next; nf_hookfn *hook; void *priv; const struct nf_hook_ops *orig_ops; };
static inline void nf_hook_entry_init(struct nf_hook_entry *entry, const struct nf_hook_ops *ops) { entry->next = NULL; entry->hook = ops->hook; entry->priv = ops->priv; entry->orig_ops = ops; }

Contributors

PersonTokensPropCommitsCommitProp
Aaron Conole46100.00%2100.00%
Total46100.00%2100.00%


static inline int nf_hook_entry_priority(const struct nf_hook_entry *entry) { return entry->orig_ops->priority; }

Contributors

PersonTokensPropCommitsCommitProp
Aaron Conole20100.00%2100.00%
Total20100.00%2100.00%


static inline int nf_hook_entry_hookfn(const struct nf_hook_entry *entry, struct sk_buff *skb, struct nf_hook_state *state) { return entry->hook(entry->priv, skb, state); }

Contributors

PersonTokensPropCommitsCommitProp
Aaron Conole37100.00%1100.00%
Total37100.00%1100.00%


static inline const struct nf_hook_ops * nf_hook_entry_ops(const struct nf_hook_entry *entry) { return entry->orig_ops; }

Contributors

PersonTokensPropCommitsCommitProp
Aaron Conole21100.00%1100.00%
Total21100.00%1100.00%


static inline void nf_hook_state_init(struct nf_hook_state *p, unsigned int hook, u_int8_t pf, struct net_device *indev, struct net_device *outdev, struct sock *sk, struct net *net, int (*okfn)(struct net *, struct sock *, struct sk_buff *)) { p->hook = hook; p->pf = pf; p->in = indev; p->out = outdev; p->sk = sk; p->net = net; p->okfn = okfn; }

Contributors

PersonTokensPropCommitsCommitProp
David S. Miller8585.00%350.00%
Eric W. Biedermann1313.00%233.33%
Pablo Neira Ayuso22.00%116.67%
Total100100.00%6100.00%

struct nf_sockopt_ops { struct list_head list; u_int8_t pf; /* Non-inclusive ranges: use 0/0/NULL to never get called. */ int set_optmin; int set_optmax; int (*set)(struct sock *sk, int optval, void __user *user, unsigned int len); #ifdef CONFIG_COMPAT int (*compat_set)(struct sock *sk, int optval, void __user *user, unsigned int len); #endif int get_optmin; int get_optmax; int (*get)(struct sock *sk, int optval, void __user *user, int *len); #ifdef CONFIG_COMPAT int (*compat_get)(struct sock *sk, int optval, void __user *user, int *len); #endif /* Use the module struct to lock set/get code in place */ struct module *owner; }; /* Function to register/unregister hook points. */ int nf_register_net_hook(struct net *net, const struct nf_hook_ops *ops); void nf_unregister_net_hook(struct net *net, const struct nf_hook_ops *ops); int nf_register_net_hooks(struct net *net, const struct nf_hook_ops *reg, unsigned int n); void nf_unregister_net_hooks(struct net *net, const struct nf_hook_ops *reg, unsigned int n); int nf_register_hook(struct nf_hook_ops *reg); void nf_unregister_hook(struct nf_hook_ops *reg); int nf_register_hooks(struct nf_hook_ops *reg, unsigned int n); void nf_unregister_hooks(struct nf_hook_ops *reg, unsigned int n); int _nf_register_hooks(struct nf_hook_ops *reg, unsigned int n); void _nf_unregister_hooks(struct nf_hook_ops *reg, unsigned int n); /* Functions to register get/setsockopt ranges (non-inclusive). You need to check permissions yourself! */ int nf_register_sockopt(struct nf_sockopt_ops *reg); void nf_unregister_sockopt(struct nf_sockopt_ops *reg); #ifdef HAVE_JUMP_LABEL extern struct static_key nf_hooks_needed[NFPROTO_NUMPROTO][NF_MAX_HOOKS]; #endif int nf_hook_slow(struct sk_buff *skb, struct nf_hook_state *state, struct nf_hook_entry *entry); /** * nf_hook - call a netfilter hook * * Returns 1 if the hook has allowed the packet to pass. The function * okfn must be invoked by the caller in this case. Any other return * value indicates the packet has been consumed by the hook. */
static inline int nf_hook(u_int8_t pf, unsigned int hook, struct net *net, struct sock *sk, struct sk_buff *skb, struct net_device *indev, struct net_device *outdev, int (*okfn)(struct net *, struct sock *, struct sk_buff *)) { struct nf_hook_entry *hook_head; int ret = 1; #ifdef HAVE_JUMP_LABEL if (__builtin_constant_p(pf) && __builtin_constant_p(hook) && !static_key_false(&nf_hooks_needed[pf][hook])) return 1; #endif rcu_read_lock(); hook_head = rcu_dereference(net->nf.hooks[pf][hook]); if (hook_head) { struct nf_hook_state state; nf_hook_state_init(&state, hook, pf, indev, outdev, sk, net, okfn); ret = nf_hook_slow(skb, &state, hook_head); } rcu_read_unlock(); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
Florian Westphal4426.04%211.11%
David S. Miller3520.71%422.22%
Patrick McHardy3319.53%15.56%
Eric W. Biedermann2414.20%527.78%
Aaron Conole169.47%15.56%
Linus Torvalds127.10%15.56%
Pablo Neira Ayuso31.78%211.11%
Jan Engelhardt10.59%15.56%
Herbert Xu10.59%15.56%
Total169100.00%18100.00%

/* Activate hook; either okfn or kfree_skb called, unless a hook returns NF_STOLEN (in which case, it's up to the hook to deal with the consequences). Returns -ERRNO if packet dropped. Zero means queued, stolen or accepted. */ /* RR: > I don't want nf_hook to return anything because people might forget > about async and trust the return value to mean "packet was ok". AK: Just document it clearly, then you can expect some sense from kernel coders :) */
static inline int NF_HOOK_COND(uint8_t pf, unsigned int hook, struct net *net, struct sock *sk, struct sk_buff *skb, struct net_device *in, struct net_device *out, int (*okfn)(struct net *, struct sock *, struct sk_buff *), bool cond) { int ret; if (!cond || ((ret = nf_hook(pf, hook, net, sk, skb, in, out, okfn)) == 1)) ret = okfn(net, sk, skb); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
Jan Engelhardt6660.00%111.11%
Patrick McHardy1513.64%222.22%
David S. Miller1311.82%111.11%
Eric W. Biedermann1311.82%333.33%
Eric Paris21.82%111.11%
Pablo Neira Ayuso10.91%111.11%
Total110100.00%9100.00%


static inline int NF_HOOK(uint8_t pf, unsigned int hook, struct net *net, struct sock *sk, struct sk_buff *skb, struct net_device *in, struct net_device *out, int (*okfn)(struct net *, struct sock *, struct sk_buff *)) { int ret = nf_hook(pf, hook, net, sk, skb, in, out, okfn); if (ret == 1) ret = okfn(net, sk, skb); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
Jan Engelhardt4343.00%114.29%
Pablo Neira Ayuso2323.00%114.29%
David S. Miller1111.00%114.29%
Eric W. Biedermann1111.00%228.57%
Linus Torvalds (pre-git)1010.00%114.29%
Patrick McHardy22.00%114.29%
Total100100.00%7100.00%

/* Call setsockopt() */ int nf_setsockopt(struct sock *sk, u_int8_t pf, int optval, char __user *opt, unsigned int len); int nf_getsockopt(struct sock *sk, u_int8_t pf, int optval, char __user *opt, int *len); #ifdef CONFIG_COMPAT int compat_nf_setsockopt(struct sock *sk, u_int8_t pf, int optval, char __user *opt, unsigned int len); int compat_nf_getsockopt(struct sock *sk, u_int8_t pf, int optval, char __user *opt, int *len); #endif /* Call this before modifying an existing packet: ensures it is modifiable and linear to the point you care about (writable_len). Returns true or false. */ int skb_make_writable(struct sk_buff *skb, unsigned int writable_len); struct flowi; struct nf_queue_entry; struct nf_afinfo { unsigned short family; __sum16 (*checksum)(struct sk_buff *skb, unsigned int hook, unsigned int dataoff, u_int8_t protocol); __sum16 (*checksum_partial)(struct sk_buff *skb, unsigned int hook, unsigned int dataoff, unsigned int len, u_int8_t protocol); int (*route)(struct net *net, struct dst_entry **dst, struct flowi *fl, bool strict); void (*saveroute)(const struct sk_buff *skb, struct nf_queue_entry *entry); int (*reroute)(struct net *net, struct sk_buff *skb, const struct nf_queue_entry *entry); int route_key_size; }; extern const struct nf_afinfo __rcu *nf_afinfo[NFPROTO_NUMPROTO];
static inline const struct nf_afinfo *nf_get_afinfo(unsigned short family) { return rcu_dereference(nf_afinfo[family]); }

Contributors

PersonTokensPropCommitsCommitProp
Patrick McHardy2191.30%266.67%
Harald Welte28.70%133.33%
Total23100.00%3100.00%


static inline __sum16 nf_checksum(struct sk_buff *skb, unsigned int hook, unsigned int dataoff, u_int8_t protocol, unsigned short family) { const struct nf_afinfo *afinfo; __sum16 csum = 0; rcu_read_lock(); afinfo = nf_get_afinfo(family); if (afinfo) csum = afinfo->checksum(skb, hook, dataoff, protocol); rcu_read_unlock(); return csum; }

Contributors

PersonTokensPropCommitsCommitProp
Patrick McHardy7197.26%266.67%
Al Viro22.74%133.33%
Total73100.00%3100.00%


static inline __sum16 nf_checksum_partial(struct sk_buff *skb, unsigned int hook, unsigned int dataoff, unsigned int len, u_int8_t protocol, unsigned short family) { const struct nf_afinfo *afinfo; __sum16 csum = 0; rcu_read_lock(); afinfo = nf_get_afinfo(family); if (afinfo) csum = afinfo->checksum_partial(skb, hook, dataoff, len, protocol); rcu_read_unlock(); return csum; }

Contributors

PersonTokensPropCommitsCommitProp
Patrick McHardy79100.00%1100.00%
Total79100.00%1100.00%

int nf_register_afinfo(const struct nf_afinfo *afinfo); void nf_unregister_afinfo(const struct nf_afinfo *afinfo); #include <net/flow.h> extern void (*nf_nat_decode_session_hook)(struct sk_buff *, struct flowi *);
static inline void nf_nat_decode_session(struct sk_buff *skb, struct flowi *fl, u_int8_t family) { #ifdef CONFIG_NF_NAT_NEEDED void (*decodefn)(struct sk_buff *, struct flowi *); rcu_read_lock(); decodefn = rcu_dereference(nf_nat_decode_session_hook); if (decodefn) decodefn(skb, fl); rcu_read_unlock(); #endif }

Contributors

PersonTokensPropCommitsCommitProp
Patrick McHardy6296.88%360.00%
Jan Engelhardt11.56%120.00%
Jozsef Kadlecsik11.56%120.00%
Total64100.00%5100.00%

#else /* !CONFIG_NETFILTER */
static inline int NF_HOOK_COND(uint8_t pf, unsigned int hook, struct net *net, struct sock *sk, struct sk_buff *skb, struct net_device *in, struct net_device *out, int (*okfn)(struct net *, struct sock *, struct sk_buff *), bool cond) { return okfn(net, sk, skb); }

Contributors

PersonTokensPropCommitsCommitProp
Arnd Bergmann5678.87%125.00%
Linus Torvalds (pre-git)1115.49%125.00%
Eric W. Biedermann22.82%125.00%
David S. Miller22.82%125.00%
Total71100.00%4100.00%


static inline int NF_HOOK(uint8_t pf, unsigned int hook, struct net *net, struct sock *sk, struct sk_buff *skb, struct net_device *in, struct net_device *out, int (*okfn)(struct net *, struct sock *, struct sk_buff *)) { return okfn(net, sk, skb); }

Contributors

PersonTokensPropCommitsCommitProp
Arnd Bergmann5276.47%125.00%
Patrick McHardy1217.65%125.00%
David S. Miller22.94%125.00%
Eric W. Biedermann22.94%125.00%
Total68100.00%4100.00%


static inline int nf_hook(u_int8_t pf, unsigned int hook, struct net *net, struct sock *sk, struct sk_buff *skb, struct net_device *indev, struct net_device *outdev, int (*okfn)(struct net *, struct sock *, struct sk_buff *)) { return 1; }

Contributors

PersonTokensPropCommitsCommitProp
David S. Miller4980.33%228.57%
Eric W. Biedermann914.75%228.57%
Patrick McHardy11.64%114.29%
Herbert Xu11.64%114.29%
Jan Engelhardt11.64%114.29%
Total61100.00%7100.00%

struct flowi;
static inline void nf_nat_decode_session(struct sk_buff *skb, struct flowi *fl, u_int8_t family) { }

Contributors

PersonTokensPropCommitsCommitProp
Patrick McHardy1789.47%150.00%
Jan Engelhardt210.53%150.00%
Total19100.00%2100.00%

#endif /*CONFIG_NETFILTER*/ #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE) #include <linux/netfilter/nf_conntrack_zones_common.h> extern void (*ip_ct_attach)(struct sk_buff *, const struct sk_buff *) __rcu; void nf_ct_attach(struct sk_buff *, const struct sk_buff *); extern void (*nf_ct_destroy)(struct nf_conntrack *) __rcu; #else
static inline void nf_ct_attach(struct sk_buff *new, struct sk_buff *skb) {}

Contributors

PersonTokensPropCommitsCommitProp
Pablo Neira Ayuso16100.00%1100.00%
Total16100.00%1100.00%

#endif struct nf_conn; enum ip_conntrack_info; struct nlattr; struct nfnl_ct_hook { struct nf_conn *(*get_ct)(const struct sk_buff *skb, enum ip_conntrack_info *ctinfo); size_t (*build_size)(const struct nf_conn *ct); int (*build)(struct sk_buff *skb, struct nf_conn *ct, enum ip_conntrack_info ctinfo, u_int16_t ct_attr, u_int16_t ct_info_attr); int (*parse)(const struct nlattr *attr, struct nf_conn *ct); int (*attach_expect)(const struct nlattr *attr, struct nf_conn *ct, u32 portid, u32 report); void (*seq_adjust)(struct sk_buff *skb, struct nf_conn *ct, enum ip_conntrack_info ctinfo, s32 off); }; extern struct nfnl_ct_hook __rcu *nfnl_ct_hook; /** * nf_skb_duplicated - TEE target has sent a packet * * When a xtables target sends a packet, the OUTPUT and POSTROUTING * hooks are traversed again, i.e. nft and xtables are invoked recursively. * * This is used by xtables TEE target to prevent the duplicated skb from * being duplicated again. */ DECLARE_PER_CPU(bool, nf_skb_duplicated); #endif /*__LINUX_NETFILTER_H*/

Overall Contributors

PersonTokensPropCommitsCommitProp
Patrick McHardy56024.09%2022.73%
David S. Miller24910.71%66.82%
Aaron Conole2209.46%33.41%
Linus Torvalds (pre-git)2209.46%55.68%
Pablo Neira Ayuso1968.43%1112.50%
Eric W. Biedermann1626.97%77.95%
Jan Engelhardt1265.42%44.55%
Arnd Bergmann1084.65%11.14%
Denys Fedoryshchenko1084.65%11.14%
Dmitry Mishin934.00%11.14%
Florian Westphal783.35%66.82%
Harald Welte612.62%22.27%
Eric Dumazet301.29%22.27%
Yasuyuki Kozakai261.12%22.27%
Mahesh Bandewar261.12%11.14%
Alexey Dobriyan150.65%11.14%
Linus Torvalds120.52%11.14%
Al Viro70.30%22.27%
Zhouyi Zhou60.26%11.14%
Herbert Xu40.17%22.27%
Ken-ichirou MATSUZAWA40.17%22.27%
Daniel Borkmann30.13%11.14%
Neil Horman30.13%11.14%
Bart De Schuymer20.09%11.14%
Hideaki Yoshifuji / 吉藤英明20.09%11.14%
Eric Paris20.09%11.14%
Jozsef Kadlecsik10.04%11.14%
Ingo Molnar10.04%11.14%
Total2325100.00%88100.00%
Directory: include/linux
Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.
Created with cregit.